-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Dec 2024 16:44:56 +0800 Source: python-werkzeug Binary: python-werkzeug-doc python3-werkzeug Architecture: all Version: 2.2.2-3+deb12u1 Distribution: bookworm Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Sean Whitton Description: python-werkzeug-doc - documentation for the werkzeug Python library (docs) python3-werkzeug - collection of utilities for WSGI applications (Python 3.x) Closes: 1054553 1070711 1086062 Changes: python-werkzeug (2.2.2-3+deb12u1) bookworm; urgency=high . * Backport upstream fix for CVE-2023-46136 (denial of service when file upload begins with CR or LF) (Closes: #1054553). * Backport upstream fixes for CVE-2024-34069 (arbitrary code execution on developer's machine via the debugger) (Closes: #1070711). * Backport upstream fix for CVE-2024-49767 (denial of service when processing multipart/form-data requests) (Closes: #1086062). Checksums-Sha1: 07ce63e63193e3170e328e7585e3562f24b8bea4 683880 python-werkzeug-doc_2.2.2-3+deb12u1_all.deb 4d8c91e587ac7788d0fa900ab62e5e544366596f 8541 python-werkzeug_2.2.2-3+deb12u1_all-buildd.buildinfo b39a96446c79f303a526c2497026075e1e35efa0 206124 python3-werkzeug_2.2.2-3+deb12u1_all.deb Checksums-Sha256: 5aeffdfdf257911e3ade253d2b6cc3f98a06df3bec1332efdbc3fbd578530230 683880 python-werkzeug-doc_2.2.2-3+deb12u1_all.deb 69b1d7bcd5f459a9a5d7b35077920bda9e6c1de7eb80dabe116640a5b0cfeb93 8541 python-werkzeug_2.2.2-3+deb12u1_all-buildd.buildinfo 283e2d849e93531581948b0c49ebdd3831c0a5fc22edb7bc08efd3c38ae055b8 206124 python3-werkzeug_2.2.2-3+deb12u1_all.deb Files: 741946dbce6ed381f5c4d38eea25a69b 683880 doc optional python-werkzeug-doc_2.2.2-3+deb12u1_all.deb eab8a64a65538bd6a8a88866af6b91ec 8541 python optional python-werkzeug_2.2.2-3+deb12u1_all-buildd.buildinfo 7357d391c0ad172d920b8ecaf5176ad4 206124 python optional python3-werkzeug_2.2.2-3+deb12u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEQsM0t1ygJv2xcx3e4cagXJhOTXsFAmdV2skACgkQ4cagXJhO TXsgOQ/+LvFeXF3ZRcZUPdbpYCMmd3c3ITqZws8aMzXZcsNhXieek8zTJQpCzAoh MNKlAY/RKapguuzN5N9SyWJVslyjQDRn0+A+Sj22FndV+CjwfgZWe6KT+8pmNmll Czk9JFU6wT1VdGHp84Wvy+g1eQCWWFF3WemMAh+uhi//Pgjabmsx8QCB6BzR+x5g rlYIe3IMN90eRQFIx09YUqYICBQqc/UxJSVCQBaz5DnWHU8XW6AI8dQyfcu5Toky +FkEGqhP9yxzMbcb6SHu4rZRb99L/h9T5w6IGPT4QLatlGfTwwyfz/fhZpFgHG5l zt+VHaSlNM0uD42qIgUfGVZb2Jbf5v0cuDW1gacNTqo9YRsU870rywEH+4s5Q66I n8S1meI2OgJJpTzEHiDkUvujCWhmsTnDMYd+4rNbSoubELqIgf87e2DeyShWeSmB 1iGtS263eja2cLULa71KB3fWIiHScjD6L1nJoa9owKG+M/pBKC72lxoNN7uix8kX hNvGp7bfMWFc0FJ4j2bSKEXqOLcbs2BFs1LzDnyvYL1c/caF/1hd7bnoyFcN1CKh 7HO2jX2BbOyMOhTU50KqJiuF9hgwDIiY9Ld1T14DIzaClYgIU8JpYJQ42ueKq/ID UUgYiOZbVJewbeOYAvqXMCdm639t83wbVWDeWW4i9TvMww6s/Rw= =E9j6 -----END PGP SIGNATURE-----